CVE-2026-2894: funadmin exposes sensitive information via… – CVSS 9.1 · Watchpost